Director, Cyber Governance and Compliance

S&P Global

. Lead contract negotiations for security and compliance terms in client agreements .

Posted 11/3/2026full-timeUnited StatesLead💰 $150,000 - $205,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in security governance, risk management, and compliance, with a strong focus on regulatory interpretation and security contract negotiation. Proven ability to develop scalable processes and frameworks while effectively communicating complex technical concepts to diverse stakeholders.

Highest-signal resume keywords

Security Governance, Risk Management, And Compliance (GRC)Regulatory InterpretationSecurity Contract NegotiationCloud Security Controls (AWS, Azure, GCP)Industry Certifications (CISSP, CISM, CISA)

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Risk-Based Decision MakingInfrastructure And Application ControlsIdentity And Access ManagementEncryption ProtocolsSecurity Monitoring SolutionsCOBITSOC 2ISO 27001NIST Cybersecurity FrameworkNIST 800-53

Soft Skills

Exceptional Written CommunicationExceptional Verbal CommunicationNegotiation SkillsStakeholder EngagementCross-Functional Collaboration

Tools & Technologies

Contract Management PlatformsSecurity Questionnaire Automation Tools (OneTrust, MetricStream)GRC Technology Solutions

Certifications & Qualifications

CISSPCISMCISACCSPCIPPCRISC

Industry Keywords

Financial ServicesGDPRDORANIS2EU AI ActCompliance Regimes

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityDockerGoogle Cloud PlatformKubernetesOpenShift

About the role

Key responsibilities & impact

Lead contract negotiations for security and compliance terms in client agreements
Serve as the primary technical advisor to Sales and Legal teams
Maintain strategic customer relationships
Evaluate proposed security commitments using risk-based decision making
Analyze compensating controls and potential roadmap investments
Communicate risk decision rationale clearly to stakeholders at all levels
Partner with Legal as the technical subject matter expert
Ensure organizational capability to deliver on negotiated security commitments
Provide potential contractual language
Analyze and interpret complex regulatory requirements
Assess scope and organizational compliance capabilities
Develop comprehensive guidance for development and technical teams
Identify and address systemic gaps between client security demands and organizational capabilities
Build cross-functional partnerships and advocate for strategic roadmap investments
Establish and maintain a knowledge repository of pre-approved security positions, standardized language, and control framework mappings

Requirements

What you’ll need

12+ years of total progressive experience in security governance, risk management, and compliance (GRC), security assurance, artificial intelligence or third-party risk management
Demonstrated expertise in regulatory interpretation and security contract negotiation
Working knowledge of financial services and enterprise regulatory environments, including GDPR, DORA, NIS2, EU AI Act and related compliance regimes
Proven track record of making independent, defensible risk decisions in high-pressure deal environments with measurable business impact
Proven experience developing and implementing scalable processes, playbooks, and frameworks for security assurance functions in enterprise environments
Comprehensive technical knowledge of infrastructure and application controls, modern cloud security controls, AWS, Azure, or GCP, Docker, Kubernetes, or OpenShift, identity and access management, encryption protocols, and security monitoring solutions
Expert-level proficiency in COBIT, SOC 2, ISO 27001, NIST Cybersecurity Framework, NIST 800-53, and ISO 42001
Ability to map contractual requirements to specific security controls
Exceptional written and verbal communication skills
Demonstrated ability to engage with legal counsel, negotiate complex terms, and present technical concepts to executive leadership
Bachelor's degree in Computer Science, Information Security, Risk Management, Business Administration, or related field, or equivalent professional experience
Industry certifications such as CISSP, CISM, CISA, CCSP, CIPP, or CRISC preferred
Hands-on experience with contract management platforms, security questionnaire automation tools such as OneTrust or MetricStream, and GRC technology solutions preferred
Indefinite right to work in the United States

Benefits

Comp & perks

Health care coverage designed for the mind and body
Generous time off
Continuous learning resources and career development
Competitive pay
Retirement planning
Continuing education program with company-matched student loan contribution
Financial wellness programs
Family benefits and perks
Retail discounts
Referral incentive awards